Re: Kernel Oopses from v4l_enum_fmt

[Nicolas Dufresne <nicolas@ndufresne.ca>]

[-- Attachment #1: Type: text/plain, Size: 10693 bytes --]

Le mercredi 13 décembre 2017 à 22:33 +0100, Oleksandr Ostrenko a
écrit :
> Dear all,
> 
> There is an issue in v4l_enum_fmt leading to kernel panic under
> certain 
> circumstance. It happens while I try to capture video from my TV
> tuner.
> 
> When I connect this USB TV tuner (WinTV HVR-1900) it gets recognized 
> just fine. However, whenever I try to capture a video from the
> device, 
> it hangs the terminal and I end up with a lot of "Unknown
> pixelformat 
> 0x00000000" errors from v4l_enum_fmt in dmesg that eventually lead
> to 
> kernel panic on a machine with Linux Mint. On another machine with 
> openSUSE it does not hang but just keeps producing the error message 
> below until I stop the video acquisition. I have already tried
> several 
> kernel versions (4.4, 4.8, 4.14) and two different distributions
> (Mint, 
> openSUSE) but to no avail.
> 
> Can somebody give me a hint on debugging this issue?
> Below are sample outputs of lsusb and dmesg.
> 
> Thanks,
> Oleksandr
> 
> lsusb
> 
> Bus 001 Device 002: ID 8087:8001 Intel Corp.
> Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
> Bus 002 Device 002: ID 8087:0a2a Intel Corp.
> Bus 002 Device 005: ID 2040:7300 Hauppauge
> Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> 
> Relevant dmesg
> 
> [  515.920080] usb 2-3: new high-speed USB device number 4 using
> xhci_hcd
> [  516.072041] usb 2-3: New USB device found, idVendor=2040,
> idProduct=7300
> [  516.072045] usb 2-3: New USB device strings: Mfr=1, Product=2, 
> SerialNumber=3
> [  516.072047] usb 2-3: Product: WinTV
> [  516.072049] usb 2-3: Manufacturer: Hauppauge
> [  516.072051] usb 2-3: SerialNumber: 7300-00-F04BADA0
> [  516.072474] pvrusb2: Hardware description: WinTV HVR-1900 Model
> 73xxx
> [  517.089290] pvrusb2: Device microcontroller firmware (re)loaded;
> it 
> should now reset and reconnect.
> [  517.121228] usb 2-3: USB disconnect, device number 4
> [  517.121436] pvrusb2: Device being rendered inoperable
> [  518.908091] usb 2-3: new high-speed USB device number 5 using
> xhci_hcd
> [  519.065592] usb 2-3: New USB device found, idVendor=2040,
> idProduct=7300
> [  519.065597] usb 2-3: New USB device strings: Mfr=1, Product=2, 
> SerialNumber=3
> [  519.065600] usb 2-3: Product: WinTV
> [  519.065602] usb 2-3: Manufacturer: Hauppauge
> [  519.065605] usb 2-3: SerialNumber: 7300-00-F04BADA0
> [  519.066862] pvrusb2: Hardware description: WinTV HVR-1900 Model
> 73xxx
> [  519.098815] pvrusb2: Binding ir_rx_z8f0811_haup to i2c address
> 0x71.
> [  519.098872] pvrusb2: Binding ir_tx_z8f0811_haup to i2c address
> 0x70.
> [  519.131651] cx25840 6-0044: cx25843-24 found @ 0x88 (pvrusb2_a)
> [  519.133234] lirc_dev: IR Remote Control driver registered, major
> 241
> [  519.134192] lirc_zilog: module is from the staging directory, the 
> quality is unknown, you have been warned.
> [  519.134194] lirc_zilog: module is from the staging directory, the 
> quality is unknown, you have been warned.
> [  519.134564] Zilog/Hauppauge IR driver initializing
> [  519.135628] probing IR Rx on pvrusb2_a (i2c-6)
> [  519.135674] probe of IR Rx on pvrusb2_a (i2c-6) done. Waiting on
> IR Tx.
> [  519.135678] i2c i2c-6: probe of IR Rx on pvrusb2_a (i2c-6) done
> [  519.135706] probing IR Tx on pvrusb2_a (i2c-6)
> [  519.135728] i2c i2c-6: Direct firmware load for haup-ir-
> blaster.bin 
> failed with error -2
> [  519.135730] i2c i2c-6: firmware haup-ir-blaster.bin not available
> (-2)
> [  519.135799] i2c i2c-6: lirc_dev: driver lirc_zilog registered at 
> minor = 0
> [  519.135800] i2c i2c-6: IR unit on pvrusb2_a (i2c-6) registered as 
> lirc0 and ready
> [  519.135802] i2c i2c-6: probe of IR Tx on pvrusb2_a (i2c-6) done
> [  519.135826] initialization complete
> [  519.140759] pvrusb2: Attached sub-driver cx25840
> [  519.147644] tuner: 6-0042: Tuner -1 found with type(s) Radio TV.
> [  519.147667] pvrusb2: Attached sub-driver tuner
> [  521.029446] cx25840 6-0044: loaded v4l-cx25840.fw firmware (14264
> bytes)
> [  521.124582] tveeprom: Hauppauge model 73219, rev D1E9, serial#
> 4031491488
> [  521.124586] tveeprom: MAC address is 00:0d:fe:4b:ad:a0
> [  521.124588] tveeprom: tuner model is Philips 18271_8295 (idx 149, 
> type 54)
> [  521.124591] tveeprom: TV standards PAL(B/G) PAL(I) SECAM(L/L') 
> PAL(D/D1/K) ATSC/DVB Digital (eeprom 0xf4)
> [  521.124593] tveeprom: audio processor is CX25843 (idx 37)
> [  521.124594] tveeprom: decoder processor is CX25843 (idx 30)
> [  521.124596] tveeprom: has radio, has IR receiver, has IR
> transmitter
> [  521.124606] pvrusb2: Supported video standard(s) reported
> available 
> in hardware: PAL-B/B1/D/D1/G/H/I/K;SECAM-B/D/G/H/K/K
> [  521.124617] pvrusb2: Device initialization completed successfully.
> [  521.124811] pvrusb2: registered device video0 [mpeg]
> [  521.124819] dvbdev: DVB: registering new adapter (pvrusb2-dvb)
> [  523.039178] cx25840 6-0044: loaded v4l-cx25840.fw firmware (14264
> bytes)
> [  523.160593] tda829x 6-0042: setting tuner address to 60
> [  523.217717] tda18271 6-0060: creating new instance
> [  523.260592] tda18271: TDA18271HD/C1 detected @ 6-0060
> [  523.768592] tda829x 6-0042: type set to tda8295+18271
> [  533.360586] cx25840 6-0044: 0x0000 is not a valid video input!
> [  533.416296] usb 2-3: DVB: registering adapter 0 frontend 0 (NXP 
> TDA10048HN DVB-T)...
> [  533.417571] tda829x 6-0042: type set to tda8295
> [  533.455567] tda18271 6-0060: attaching existing instance
> [  591.458582] cx25840 6-0044: loaded v4l-cx25840.fw firmware (14264
> bytes)
> [  595.551320] Unknown pixelformat 0x00000000
> [  595.551344] ------------[ cut here ]------------
> [  595.551363] WARNING: CPU: 2 PID: 5820 at 

This is not a kernel panic, but a warning. In recent code it's this
one:

https://elixir.free-electrons.com/linux/latest/source/drivers/media/v4l2-core/v4l2-ioctl.c#L1288

Though, it is usually a driver issue. More information will be needed.


> ../drivers/media/v4l2-core/v4l2-ioctl.c:1288
> v4l_enum_fmt+0xcf6/0x13a0 
> [videodev]
> [  595.551365] Modules linked in: tda10048 tda18271 tda8290 tuner 
> lirc_zilog(C) lirc_dev rc_core cx25840 pvrusb2 tveeprom cx2341x
> dvb_core 
> v4l2_common videodev nf_log_ipv6 xt_comment nf_log_ipv4
> nf_log_common 
> xt_LOG xt_limit af_packet iscsi_ibft iscsi_boot_sysfs ip6t_REJECT 
> nf_reject_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 ipt_REJECT 
> nf_reject_ipv4 xt_pkttype xt_tcpudp iptable_filter ip6table_mangle 
> nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_ipv4 
> nf_defrag_ipv4 ip_tables xt_conntrack nf_conntrack ip6table_filter 
> ip6_tables x_tables snd_hda_codec_hdmi snd_hda_codec_realtek 
> snd_hda_codec_generic arc4 intel_rapl xfs x86_pkg_temp_thermal 
> intel_powerclamp coretemp kvm_intel kvm libcrc32c irqbypass 
> crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc raid1 iwlmvm 
> intel_spi_platform intel_spi
> [  595.551436]  spi_nor mtd iTCO_wdt mac80211 iTCO_vendor_support 
> snd_hda_intel snd_hda_codec snd_soc_rt5640 snd_hda_core snd_hwdep 
> snd_soc_rl6231 snd_soc_core md_mod snd_compress btusb
> snd_pcm_dmaengine 
> iwlwifi btrtl btbcm snd_pcm btintel bluetooth aesni_intel
> ecdh_generic 
> snd_timer battery cfg80211 aes_x86_64 snd pcspkr crypto_simd
> glue_helper 
> rfkill cryptd i915 e1000e i2c_i801 lpc_ich ptp pps_core thermal
> mei_me 
> drm_kms_helper fan mei drm fb_sys_fops syscopyarea sysfillrect
> sysimgblt 
> i2c_algo_bit shpchp elan_i2c soundcore tpm_tis video tpm_tis_core 
> snd_soc_sst_acpi tpm snd_soc_sst_match gpio_lynxpoint dw_dmac 
> spi_pxa2xx_platform acpi_pad acpi_als kfifo_buf button industrialio 
> btrfs xor zstd_decompress zstd_compress xxhash raid6_pq crc32c_intel 
> nvme xhci_pci ehci_pci ehci_hcd xhci_hcd nvme_core usbcore
> [  595.551523]  sdhci_acpi sdhci mmc_core i2c_hid sg
> [  595.551533] CPU: 2 PID: 5820 Comm: motv Tainted: G         C 
> 4.14.2-3.gb5596a5-default #1
> [  595.551535] Hardware name:                  /NUC5i5RYB, BIOS 
> RYBDWi35.86A.0367.2017.0929.1059 09/29/2017
> [  595.551538] task: ffff979f823f8140 task.stack: ffffbde8826e4000
> [  595.551550] RIP: 0010:v4l_enum_fmt+0xcf6/0x13a0 [videodev]
> [  595.551552] RSP: 0018:ffffbde8826e7ca8 EFLAGS: 00010296
> [  595.551556] RAX: 000000000000001e RBX: ffffbde8826e7d98 RCX: 
> 0000000000000000
> [  595.551558] RDX: ffff979f96d16440 RSI: ffff979f96d0e2d8 RDI: 
> ffff979f96d0e2d8
> [  595.551560] RBP: 0000000000000000 R08: 0000000000000001 R09: 
> 0000000000000322
> [  595.551562] R10: ffff979f8507ab00 R11: 0000000000000000 R12: 
> ffff979f85a5a300
> [  595.551564] R13: ffffffffc12a1cc0 R14: ffff979f8507ab00 R15: 
> ffff979f85a5a300
> [  595.551567] FS:  00007ff613fb9780(0000) GS:ffff979f96d00000(0000) 
> knlGS:0000000000000000
> [  595.551569] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [  595.551571] CR2: 00007ff60a198290 CR3: 000000041b3e6004 CR4: 
> 00000000003606e0
> [  595.551574] Call Trace:
> [  595.551590]  __video_do_ioctl+0x310/0x320 [videodev]
> [  595.551602]  ? video_usercopy+0x1ec/0x600 [videodev]
> [  595.551612]  video_usercopy+0x174/0x600 [videodev]
> [  595.551623]  ? v4l_enum_fmt+0x13a0/0x13a0 [videodev]
> [  595.551632]  ? v4l_enum_fmt+0x13a0/0x13a0 [videodev]
> [  595.551647]  pvr2_v4l2_ioctl+0x83/0x100 [pvrusb2]
> [  595.551658]  v4l2_ioctl+0xa9/0xd0 [videodev]
> [  595.551665]  do_vfs_ioctl+0x8d/0x5d0
> [  595.551670]  ? __fput+0x15b/0x1d0
> [  595.551676]  ? mntput_no_expire+0x11/0x1a0
> [  595.551680]  SyS_ioctl+0x74/0x80
> [  595.551686]  entry_SYSCALL_64_fastpath+0x1e/0xa9
> [  595.551690] RIP: 0033:0x7ff610862659
> [  595.551691] RSP: 002b:00007ffe84b2a078 EFLAGS: 00000246 ORIG_RAX: 
> 0000000000000010
> [  595.551695] RAX: ffffffffffffffda RBX: 000000000192ee20 RCX: 
> 00007ff610862659
> [  595.551697] RDX: 00007ffe84b2a110 RSI: 00000000c0405602 RDI: 
> 0000000000000004
> [  595.551699] RBP: 00007ffe84b29f80 R08: 0000000000000000 R09: 
> 0000000000000004
> [  595.551701] R10: 00007ff60c6c9620 R11: 0000000000000246 R12: 
> 000000000192ee20
> [  595.551703] R13: 0000000000000049 R14: 00007ff613fec000 R15: 
> 0000000000000000
> [  595.551706] Code: 3d 4f 35 31 31 0f 84 bf 05 00 00 3d 4d 54 32 31
> 48 
> c7 c6 59 17 22 c1 0f 84 e5 f5 ff ff 89 c6 48 c7 c7 77 23 22 c1 e8 15
> c2 
> ec c1 <0f> ff 80 7b 0c 00 0f 85 73 f3 ff ff 8b 43 2c 48 c7 c1 1e 17
> 22
> [  595.551775] ---[ end trace d1089f1c30e702b9 ]---

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 195 bytes --]